This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3133372e302f32342d3330203d3e203238313838.roa
File: 3137372e31322e3133372e302f32342d3330203d3e203238313838.roa (raw, json)
Hash identifier: 7R4b8QMzWNRkAzBMAFxzmwxlCte6RgAxHcj1TdGgpmQ=
Subject key identifier: C0:96:2D:1F:EB:6F:92:1D:88:8B:E6:D4:04:47:AA:77:49:C5:DE:96
Certificate issuer: /CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Certificate serial: 5566E3F1D8BA7EC1F39DB67E0FB3061E90514B5F
Authority key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3133372e302f32342d3330203d3e203238313838.roa
Signing time: Wed 05 Feb 2025 22:57:52 +0000
ROA not before: Wed 05 Feb 2025 22:52:52 +0000
ROA not after: Wed 04 Feb 2026 22:57:52 +0000
asID: 28188
IP address blocks: 177.12.137.0/24 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:66:e3:f1:d8:ba:7e:c1:f3:9d:b6:7e:0f:b3:06:1e:90:51:4b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Validity
Not Before: Feb 5 22:52:52 2025 GMT
Not After : Feb 4 22:57:52 2026 GMT
Subject: CN=C0962D1FEB6F921D888BE6D40447AA7749C5DE96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:59:67:23:8f:1e:42:8e:a3:c3:ea:82:57:
cd:f3:0b:9e:55:e4:13:9b:ce:50:a3:68:2f:11:21:
ba:f9:41:29:55:0f:68:97:b9:6a:02:44:f5:c7:4f:
38:d8:c4:98:9c:a0:c8:03:30:a1:97:f1:75:7b:3a:
6b:ae:d4:18:4b:2c:e6:c3:81:94:d3:a6:ed:3c:ca:
f9:2c:09:42:3e:c9:25:b7:78:13:d6:ce:e9:bc:d8:
1e:ce:a8:34:59:54:9f:46:bf:1e:04:f2:19:36:2f:
7a:ce:4c:c6:55:93:18:67:cf:6d:ca:ca:0a:3f:61:
23:c9:29:72:76:0c:de:e8:80:74:19:56:a0:58:ae:
cd:06:43:b5:9d:0c:44:b9:a4:07:70:23:79:6c:4e:
e0:a1:eb:64:e4:cd:6a:0a:46:9b:37:74:d1:8e:05:
e3:95:7a:b0:c0:6f:6e:3e:fe:3c:a2:81:be:4f:1a:
ed:5e:d3:f4:f7:18:b9:b8:05:aa:5c:c0:b1:a9:48:
0f:2c:7a:88:bc:2b:66:41:4b:54:3d:9c:c0:7c:0d:
cd:2c:07:f7:e4:c4:ec:dc:4b:f3:90:f9:a1:ac:1b:
4c:06:da:0b:05:8e:c0:92:8d:98:35:3d:dc:68:85:
b7:7d:9e:01:7c:49:b2:10:f3:9f:26:03:fc:b1:f9:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:96:2D:1F:EB:6F:92:1D:88:8B:E6:D4:04:47:AA:77:49:C5:DE:96
X509v3 Authority Key Identifier:
keyid:E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3133372e302f32342d3330203d3e203238313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.12.137.0/24
Signature Algorithm: sha256WithRSAEncryption
02:f1:fc:40:5d:55:38:bf:d3:f0:79:52:3a:85:7d:be:86:83:
9f:44:28:1f:f9:25:a2:b7:7d:f8:e1:47:ad:12:51:11:5e:42:
87:14:00:8b:bf:cd:ab:fa:e8:e1:af:9f:f3:94:ab:16:e3:44:
00:43:90:13:93:34:c5:d9:1f:5f:6e:15:2a:19:a8:45:e6:4a:
25:6d:3e:7d:a9:79:ff:b6:88:a1:c9:44:f6:b4:a1:69:ae:5a:
f8:17:29:a9:07:9f:06:48:12:97:a2:34:2c:3a:53:ec:4d:17:
04:f8:40:62:b1:77:61:cb:99:03:80:51:5c:4a:bd:ec:67:1d:
ec:94:60:f2:f1:f9:a2:fb:51:9b:4f:e7:b2:d7:1b:41:0c:23:
0d:06:02:1c:19:50:1a:44:1a:c9:91:21:38:45:56:48:4f:6e:
55:ee:31:6e:f5:b6:5d:5e:3f:13:bf:e0:6e:5b:14:53:67:d2:
86:de:7d:01:8c:3d:62:69:22:a5:8b:29:cd:6d:17:30:ad:22:
37:50:aa:57:b5:37:47:4c:ef:54:02:71:b8:dd:08:92:7a:51:
a0:87:3d:8d:2d:61:8a:fb:39:58:f8:ed:c9:db:00:85:3b:b8:
4a:1f:d5:f7:7a:2e:7d:44:50:9c:05:01:c0:a9:16:5a:05:e6:
e3:3c:b9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:47:24 2025 by rpki-client